Honeypot dynamic configuration and honeynet design implementation scheme based on online learning

The invention designs and realizes a set of complete high-interaction mixed honeynet for an airport luggage processing system. Aiming at the problems existing in specific design and implementation of the honeynet, a dynamic HMI interface is provided for a virtual honeypot in the honeynet, and active trapping of attackers is achieved. And real and dynamic physical process simulation is provided for the physical honey pot in the honey net. Furthermore, an online prediction model based on an FTRL algorithm is provided for the honeypot, and dynamic configuration of the honeypot is achieved. And finally, the method disclosed by the invention is used for carrying out deployment and testing on the constructed BHS (Bagging Handling System) high-interaction hybrid honeynet system. The honeynet provided by the invention has excellent concealment, disguise ability and interaction ability while meeting high cost benefit. 本发明面向机场行李处理系统，设计和实现了一套完整的高交互混合蜜网。针对蜜网在具体设计和实现中存在的问题，本发明为蜜网中的虚拟蜜罐提供了动态的HMI界面，实现了对攻击者的主动诱捕。并且为蜜网中的物理蜜罐提